The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-58624: Improper Input Validation5.4 MediumN/A1%Jul 20, 2026
CVE-2026-56624: Improper Certificate Validation7.3 HighN/A0%Jul 20, 2026
CVE-2026-56623: Improper Limitation of a Pathname to a Restricted Directory7.1 HighN/A1%Jul 20, 2026
CVE-2026-56452: Improper Limitation of a Pathname to a Restricted Directory7.5 HighN/A1%Jul 20, 2026
CVE-2026-44230: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jul 20, 2026
CVE-2026-44229: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jul 20, 2026
CVE-2026-44228: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jul 20, 2026
CVE-2026-44227: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jul 20, 2026
CVE-2026-39878: Improper Neutralization of Input During Web Page Generation9.3 CriticalN/A0%Jul 20, 2026
CVE-2026-26483: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jul 20, 2026
CVE-2026-35198: Improper Neutralization of Input During Web Page Generation9.0 CriticalN/A0%Jul 20, 2026
CVE-2026-32822: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)6.1 MediumN/A0%Jul 20, 2026
CVE-2026-62183: Improper Privilege Management9.8 CriticalN/A1%Jul 20, 2026
CVE-2026-59238: Improper Neutralization of Input During Web Page GenerationN/A6.9 Medium1%Jul 20, 2026
CVE-2026-46516: Improper Neutralization of Input During Web Page GenerationN/A4.8 Medium0%Jul 20, 2026
CVE-2026-63762: NULL Pointer DereferenceN/A6.0 Medium0%Jul 20, 2026
CVE-2026-2445: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Jul 20, 2026
CVE-2026-9833: Improper Neutralization of Input During Web Page Generation7.1 HighN/A1%Jul 20, 2026
CVE-2026-16223: Server-Side Request Forgery (SSRF)6.3 Medium2.1 Low0%Jul 19, 2026
CVE-2026-16222: Server-Side Request Forgery (SSRF)6.3 Medium2.1 Low0%Jul 19, 2026
CVE-2026-57857: Improper Neutralization of Input During Web Page Generation4.3 Medium5.1 Medium0%Jul 18, 2026
CVE-2026-12228: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Jul 18, 2026
CVE-2025-71396: Allocation of Resources Without Limits or ThrottlingN/A2.3 Low1%Jul 18, 2026
CVE-2025-71393: Uncontrolled RecursionN/A6.0 Medium0%Jul 18, 2026
CVE-2026-16088: Improper Limitation of a Pathname to a Restricted Directory4.7 Medium2.0 Low0%Jul 18, 2026
1801-1825 of 16390
‹›